LoginSign Up
← Back to all sparks
T

Tracecat

PM
Velocity7.5

Open-source workflow automation and case management platform.

tracecat.com ↗

Tracecat is turning case comments into an agent console while it hardens the sandbox around them

agentic-soarsandbox-isolationmcpcase-managementrelease-candidates
◆Current state
Tracecat is deep in a beta.52 release-candidate train, eight RCs in, following the beta.51 release that made the Action Gateway mandatory. Two threads dominate: agents are becoming addressable from inside case comments, and the sandbox that runs them is being bounded — socket budgets, registry artifact caches, egress filtering. The product is a security automation platform steadily converting its agent story from a feature into the primary interaction surface.
◆Where it's heading
The agent work is moving from 'you can invoke an agent' to 'the agent lives in the case thread' — mentions, session chat, activity shown inline, and now MCP integration references correlated on workspace pull. Running alongside it is a sustained isolation effort: every second RC raises or filters the NSTUN socket budget, which reads as capacity being tuned under real agent load rather than a one-off fix. The UI is catching up too, with a properties rail and editor redesign borrowed from Linear's density.
◆Prediction
Expect beta.52 to land as a final release with agent-in-comments as its headline, and the NSTUN capacity raises to stop once the ceiling holds. Whether the MCP reference correlation grows into full workspace-level integration mapping is not yet visible in these entries.

◆Recent moves

  1. 4d ago

    MCP integration refs correlate on workspace pull

    A single agents-section change correlating MCP integration references when a workspace is pulled. It tightens the integration bookkeeping behind the agent surface without changing what an operator can do.

    View source ↗
  2. 4d ago

    Linear-style properties rail lands with an editor and picker redesign

    A Linear-style properties rail with a redesigned editor and picker — the first substantial UI move in this RC train, filed under bug fixes but visibly a density overhaul. The NSTUN UDP capacity raise to 2048 continues the sandbox tuning running through beta.52.

    View source ↗
  3. 4d ago

    Comment-invoked agent sessions get simpler, mentions get docs

    Simplified session chat for comment-invoked agents plus documentation for agent mentions — refinement of the feature beta.52 is built around rather than new surface. The NSTUN socket budget rises again, to 1024.

    View source ↗
  4. 5d ago

    Tracecat beta.52-rc.5 bounds the registry artifact cache and adds custom field display names

    Leased LRU eviction bounds the registry artifact cache, closing an unbounded-growth path in the executor. Custom field display names get exposed and persisted, a small but real modelling gain for case schemas.

    View source ↗
  5. 6d ago

    Tracecat beta.52-rc.4 lets agents be invoked from comment mentions

    Agents become invocable from comment mentions, with their activity rendered in the thread — the change that defines the beta.52 arc. Everything since has been refinement of this interaction rather than new capability.

    View source ↗
  6. 6d ago

    Tracecat beta.52-rc.3 enforces filtered NSTUN egress

    Filtered egress for NSTUN, an internal isolation control operators will not see directly. It sits at the start of the sandbox-bounding thread that runs the length of this RC train.

    View source ↗